Back Route Verification - BinTec X4100 User Manual

Access Security
To do
Proceed as follows to restrict access to a local service:
If an entry defines both an address and an interface for checking, both criteria
must be fulfilled for an incoming call before
Go to IP L
OCAL
All the entries made until now are listed here.
Press ADD to add a new entry.
Select the desired value for Service.
Select Verify IP Address, e.g.
Enter the desired IP Address, if applicable.
Enter the desired Mask, if applicable.
Select Verify Interface, e.g.
Select the desired value for Interface, if applicable.
Press SAVE.
The entry is listed.
9.2.10

Back Route Verification

This term conceals a simple but very effective
Route Verification is activated at a WAN partner, only those data packets are
transported via the interface to the WAN partner that would be routed over the
same interface on the back route. You can therefore prevent packets with fake
IP addresses being fed to your LAN – even without filters. This means you can
easily prevent known and as yet unknown Denial-of-Service and IP spoofing at-
tacks.
Proceed as follows to activate Back Route Verification for a WAN partner:
Go to WAN P
ARTNER
Activate Back Route Verify with on .
X4100/200/300
S A C
ERVICES CCESS ONTROL
verify .
verify .
X4100/200/300
E IP A
DIT DVANCED
X4100/200/300
accepts this call.
.
function. If Back
S
.
ETTINGS
User's Guide
9
335